Yesterday, a coworker informed me that a user had opened a malicious e-mail containing a .dotm document which she could not open.
I undertook the usual steps to prevent the malware from spreading to other servers.
But should I also notify users of what had taken place yesterday and to remind them of the dangers of such e-mails?
Note: The last time we had a (big) security breach, we did notify the users of what had happened. Both that and the one above were results of users opening malicious mails from unknown senders. I could understand that we should remind users of not opening mails from unknown senders, so such breaches can be avoided in the future. But my company does not specify whether we should notify users of security breaches (even if there almost was one)